AsmVir Famil
Details
AsmVir Family
These viruses search for .ASM files and overwrite them with virus’ hexadecimal dump. While overwriting the viruses add to this dump the assembler instructions that allow to compile and link infected .ASM files:
;~ <- virus ID
casmseg segment
assume cs:casmseg,ds:casmseg,ss:casmseg
org 100h
.radix 10
start:
db all <- virus hex dump
db …
casmseg ends
end start
Being compiled and linked infected .ASM files can spread the virus.
The viruses also contain the text:
ASMVirus by Qark/VLAD042
Related Posts